search

siyuan-note / siyuan

A privacy-first, self-hosted, fully open source personal knowledge management software, written in typescript and golang.
https://b3log.org/siyuan
GNU Affero General Public License v3.0
19.25k stars 1.45k forks source link

Upgrade to PDF.js v4.7.85 #11650

Closed 88250 closed 4 days ago

88250 commented 4 months ago

详情见下：https://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js/

或者直接打开这个pdf就行了：https://codeanlabs.com/wp-content/uploads/2024/05/poc_generalized_CVE-2024-4367.pdf

Originally posted by @zxhd863943427 in https://github.com/siyuan-note/siyuan/issues/11635#issuecomment-2148795060

pisceswb commented 4 months ago

希望可以增加选项，始终使用系统默认PDF阅读器打开PDF文件。

TCOTC commented 3 weeks ago

pdf.js 该更新一下了

88250 commented 4 days ago

希望可以增加选项，始终使用系统默认PDF阅读器打开PDF文件。

https://github.com/siyuan-note/siyuan/issues/10641